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1 . (Currently amended) A method of managing authorization tokens within a 
computer system comprising: 

creating a master owner token indicating full ownership of a r e sourc e trusted 
platform module w ithin the computer system by a management environment; 

creating at least one delegate owner token for a delegated environment; 

communicating the delegate owner token to the delegated environment and 
to the resource trusted platform module : and 

allowing access to the resource trusted platform module by the delegated 
environment when the delegated environment presents a valid delegate owner 
token to the resource trusted platform module . 

2. (Original) The method of claim 1. further comprising storing the master owner 
token in a secure storage within the computer system. 

3. (Cancelled) 

4. (Original) The method of claim 1 r wherein the management environment assigns 
a delegate owner token to a delegated environment by sealing the delegate owner 
token to the delegated environment. 

5. (Original) The method of claim 1 , wherein the master owner token indicates the 
management environment can change at least one of the master owner token and a 
delegate owner token. 

6. (Original) The method of claim 1 , further comprising launching the management 
environment before launching the delegated environment 
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7. (Currently amended) The method of claim 1 , further comprising storing the 
delegate owner token in an access control list in the f osourc e trusted platform 
module . 

8. (Original) The method of claim 1 f further comprising removing, by the 
management environment, a delegate owner token from the access control list and 
adding a different delegate owner token to the access control list. 

9. (Currently amended) An article comprising: 

a storage medium having a plurality of machine readable instructions, 
wherein when the instructions are executed by a processor, the instructions provide 
for managing authorization tokens within a computer system by 

creating a master owner token indicating full ownership of a r o souro e trusted 
platform module within the computer system by an administrative environment; 

creating at least one delegate owner token for a environment; 

communicating the delegate owner token to the environment and to the 
r e sourc e trusted platform module ; and 

allowing access to the resource trusted platform module by the environment 
when the environment presents a valid delegate owner token to the r esource trusted 
platform module . 

1 0. (Original) The article of claim 9, further comprising instructions for storing the 
master owner token in a secure storage within the computer system. 

11. (Cancelled) 

12. (Original) The article of claim 9, wherein the management environment assigns 
a delegate owner token to a delegated environment by sealing the delegate owner 
token to the delegated environment 
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13. (Original) The article of claim 9, wherein the master owner token indicates the 
management environment can change at least one of the master owner token and a 
delegate owner token. 

14. (Original) The article of claim 9 f further comprising instructions for launching 
the management environment before launching the environment 

15. (Cunrently amended) The article of claim 9, further comprising instructions for 
storing the delegate owner token in an access control list in the resourc e trusted 
platform module . 

16. (Original) The article of claim 9, further comprising instructions for removing, by 
the management environment, a delegate owner token from the access control list 
and adding a different delegate owner token to the access control list 

17. (Currently amended) A computer system comprising: 

a plurality of environments; 

a management environment to create a master owner token indicating full 
ownership of a re s ourc e trusted platform module within the computer system, to 
create a plurality of delegate owner tokens indicating partial ownership of the 
resourc e trusted platform module , and to communicate a selected one of the 
delegate owner tokens to a selected one of the plurality of environments and to the 
resourc e trusted platform module : 

wherein the resourc e trusted platform module stores delegate owner tokens 
received from the management environment and allows access to the resourc e 
trusted platform module by the selected environment when a valid delegate owner 
token is presented to the r e sourc e trusted platform module by the selected 
environment. 

18. (Original) The computer system of claim 17, further comprising a secure 
storage to store the master owner token. 
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19. (Cancelled) 

20. (Currently amended) The computer system of claim 19 claim 17 . wherein the 
trusted platform module comprises an access control list for storing the delegate 
owner tokens received from the management environment 
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